<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>Title</title>
</head>
<body>
    <h1>{{ input_str }}</h1> XSS

    {% macro func(na,ty) %}
        <input type="{{ ty }}" name="{{ na }}">
    {% endmacro %}

    {{ func("{{stu.name}}","text") }}
</body>
</html>